Pullup ticket #4467 - requested by wiz
net/tor: security update

Revisions pulled up:
- net/tor/Makefile                                              1.99
- net/tor/distinfo                                              1.60

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Wed Jul 30 11:49:26 UTC 2014

   Modified Files:
   	pkgsrc/net/tor: Makefile distinfo

   Log Message:
   Update to 0.2.4.23:

   Changes in version 0.2.4.23 - 2014-07-28
     Tor 0.2.4.23 brings us a big step closer to slowing down the risk from
     guard rotation, and also backports several important fixes from the
     Tor 0.2.5 alpha release series.

     o Major features:
       - Clients now look at the "usecreatefast" consensus parameter to
         decide whether to use CREATE_FAST or CREATE cells for the first hop
         of their circuit. This approach can improve security on connections
         where Tor's circuit handshake is stronger than the available TLS
         connection security levels, but the tradeoff is more computational
         load on guard relays. Implements proposal 221. Resolves ticket 9386.
       - Make the number of entry guards configurable via a new
         NumEntryGuards consensus parameter, and the number of directory
         guards configurable via a new NumDirectoryGuards consensus
         parameter. Implements ticket 12688.

     o Major bugfixes:
       - Fix a bug in the bounds-checking in the 32-bit curve25519-donna
         implementation that caused incorrect results on 32-bit
         implementations when certain malformed inputs were used along with
         a small class of private ntor keys. This bug does not currently
         appear to allow an attacker to learn private keys or impersonate a
         Tor server, but it could provide a means to distinguish 32-bit Tor
         implementations from 64-bit Tor implementations. Fixes bug 12694;
         bugfix on 0.2.4.8-alpha. Bug found by Robert Ransom; fix from
         Adam Langley.

     o Minor bugfixes:
       - Warn and drop the circuit if we receive an inbound 'relay early'
         cell. Those used to be normal to receive on hidden service circuits
         due to bug 1038, but the buggy Tor versions are long gone from
         the network so we can afford to resume watching for them. Resolves
         the rest of bug 1038; bugfix on 0.2.1.19.
       - Correct a confusing error message when trying to extend a circuit
         via the control protocol but we don't know a descriptor or
         microdescriptor for one of the specified relays. Fixes bug 12718;
         bugfix on 0.2.3.1-alpha.
       - Avoid an illegal read from stack when initializing the TLS
         module using a version of OpenSSL without all of the ciphers
         used by the v2 link handshake. Fixes bug 12227; bugfix on
         0.2.4.8-alpha.  Found by "starlight".

     o Minor features:
       - Update geoip and geoip6 to the July 10 2014 Maxmind GeoLite2
         Country database.
Pullup ticket #4467.
Pullup ticket #4468 - requested by obache
emulators/suse131_mozilla-nss: security update

Revisions pulled up:
- emulators/suse131_mozilla-nss/Makefile                        1.4
- emulators/suse131_mozilla-nss/distinfo                        1.4

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Fri Aug  1 09:28:47 UTC 2014

   Modified Files:
   	pkgsrc/emulators/suse131_mozilla-nss: Makefile distinfo

   Log Message:
   Appy openSUSE-SU-2014:0939-1, fixes CVE-2014-1544.

   Bump PKGREVISION.
Pullup ticket #4468.
Pullup ticket #4469 - requested by tron
print/xpdf: security update

Revisions pulled up:
- print/xpdf/Makefile                                           1.81
- print/xpdf/distinfo                                           1.42
- print/xpdf/patches/patch-al                                   1.5
- print/xpdf/patches/patch-am                                   1.4
- print/xpdf/patches/patch-aq                                   deleted
- print/xpdf/patches/patch-ar                                   deleted

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Fri Aug  1 12:31:27 UTC 2014

   Modified Files:
   	pkgsrc/print/xpdf: Makefile distinfo
   	pkgsrc/print/xpdf/patches: patch-al patch-am
   Removed Files:
   	pkgsrc/print/xpdf/patches: patch-aq patch-ar

   Log Message:
   Update "xpdf" package to version 3.04. Changes since version 3.03:
   - New text extractor.
   - Added the pdftohtml tool.
   - Added the pdftopng tool.
   - New trapezoid-based rasterizer core (for performance).
   - Generate appearance streams for Line, PolyLine, and Polygon
     annotations.
   - Added the closeWindowOrQuit command, and changed the default binding
     for ctrl-W from closeWindow to closeWindowOrQuit.
   - Implemented the new AES-256 mode (R=3D6, Acrobat X).
   - Add an object cache.
   - Added a small cache for object streams.
   - Modify PSOutputDev to use LZW compression instead of RLE, with a
     fallback to RLE if the "psLZW no" setting is given.
   - Pdfinfo now prints page rotation info.
   - Modified ImageOutputDev, used by pdfimages, to output the masks and
     soft masks used when drawing images.
   - Remove non-printable characters from error output, just in case they
     might cause problems for the terminal program.
   - Added initial support for Code3of9 bar codes in XFA forms.
   - Added the mapExtTrueTypeFontsViaUnicode xpdfrc command.
   - Apply stroke adjustment to rectangular images and clipping regions (in
     addition to strokes and fills).
   - Decode JPEG 2000 images at less than full resolution if the full res
     image isn't needed (i.e., if the raw image is higher resolution than
     the output).
   - Implemented knockout groups.
   - Removed t1lib support.
   - Added support for images with 16-bit components.
   - Rewrote the Dict class to use a hash table; as a side effect, this
     handles dictionaries with multiple definitions for a key, which are
     in violation of the spec, but Acrobat appears to handle.
   - The transformed line width computation -- used to implement the
     minLineWidth setting, and the hairline threshold in monochrome mode --
     was incorrect.
   - Pdftops was not correctly handling the case where it couldn't find
     a 16-bit font -- this led to crashes and/or invalid PostScript.
   - A bug in FlateStream::getBlock() was causing problems with narrow
     images.
   - Use the correct _WIN32 define instead of WIN32.
   - Use copy-on-write for the clip path in SplashState (when doing gsave),
     for performance.
   - Added a Solaris-specific entry to the ghostscript font search path.
   - SplashState was initializing line width to 0 instead of 1.
   - Abort processing on a content stream after getting 500 errors
     (undefined operator, wrong number of args) -- this avoids very long
     processing time for malicious PDF files using bogus RLE encoded
     content streams.
   - Added the psUseCropBoxAsPage xpdfrc option; "pdftops -pagecrop" now
     sets psUseCropBoxAsPage; "pdftops -pagecrop -paper match" now uses
     the CropBox as the page size.
   - Re-architected the AcroForm support code into a separate AcroForm
     module.
   - Fixed the handling of overprinting/transparency interaction, using
     the CompatibleOverprint blend mode.
   - The TIFF predictor code for the 1-bit-per-pixel case was broken.
   - For triangle and patch mesh shadings (types 4-7) with color functions,
     interpolate the function parameter not the color.
   - Check the fontFile/fontDir commands before (instead of after) doing
     Base-14 substitution in PS output.
   - Correctly handle non-embedded TrueType fonts that have an Identity
     ToUnicode mapping (display and PS output were failing).
   - Added support for XFA form rendering, including an "enableXFA" xpdfrc
     setting.
   - Handle PFB Type 1 fonts when generating PostScript output.
   - Unwind any extraneous saved graphics state at the end of the page
     (before drawing annotations).
   - Added some integer overflow checks in the GString class.
   - Handle 16-bit components in JPEG 2000 images.
   - ActualText spans can end without a valid font, in which case
     TextPage::beginWord was crashing.
   - The Domain entry in function shadings wasn't being parsed correctly.
   - Fixed a bug in the JPEG decoder - successive approximation
     (progressive mode) coefficients weren't being handled correctly.
   - Added a better infinite loop test to the xref parser.
   - When generating PostScript, merge reused TrueType fonts (if their
     code-to-GID mappings are the same).
   - Tweak the Gouraud triangle shaded fill code to end the recursive
     splitting if the triangles get sufficiently small.
   - Do bilinear interpolation when upsampling images.
   - When skipping extraneous image data from an inline image, look for
     EI<whitespace> instead of just EI.
   - When writing to stdout on Windows, pdftoppm now sets the file mode to
     binary.  [Thanks to Robert Frunzke.]
   - Accept strings as well as names for the BaseFont entry in font
     objects.
   - Removed the TEXTOUT_WORD_LIST config option (with the new text
     extractor, this is always enabled).
   - Fixed a bug in the JBIG2 decoder (the TPGD context for template #3 in
     readGenericBitmap was incorrect).
   - Rewrote the PostScriptFunction code for performance.
   - Handle 8-bit OpenType CFF fonts that are missing required tables in
     the OpenType wrapper.
   - Handle tiling patterns with reversed coordinates in their bounding
     boxes.
   - Added support for 64-bit file offsets, i.e., PDF files larger than
     2GB.
   - Optimize the code that rasterizes pattern-filled image masks.
   - Added support for Mac OS X system fonts (Base-14 only).
   - The backdrop color in luminosity-type soft mask groups was not being
     handled correctly.
   - Modified behavior of "pdftops -paper match -duplex ..." - it will now
     duplex consecutive same-sized pages.
   - Tweak the handling of degenerate fills ('moveto lineto fill') to
     match Adobe.
   - Don't honor the OPM=3D1 setting with ICCBased CMYK color spaces.
   - Whole-word searches were treating certain punctuation (Unicode number
     separators and terminators) as part of the word, e.g., searching for
     "foo" would not match "foo,".
   - Use the TextString class everywhere it makes sense.
   - Removed the unnecessary segment sort in Splash (performance
     optimization).
   - Handle hyperlinks that use Widget-type annotations.
   - Fix up the integer overflow checks to avoid issues with clever
     compilers.  [Thanks to Nickolai Zeldovich.]
   - Correctly handle streams with missing Length entries in damaged PDF
     files.
   - Added a compile-time option (LOAD_FONTS_FROM_MEM) to load fonts from
     memory rather than temporary files on disk.
   - Added the psRasterSliceSize xpdfrc option.
   - Fixed a case in the JPEG 2000 arithmetic decoder where extra data is
     present in packet i, and needs to be saved for use in packet i+1.
   - Fixed a bug in the JPEG 2000 decoder related to images with fewer than
     8 bits per component.
   - Handle the case in PSOutputDev where slice size overflows a 32-bit
     integer.
   - Add (partial) support for TrueType cmap format 2.
   - Always pass FT_LOAD_NO_BITMAP to FreeType -- bitmaps apparently fail
     with rotated characters.
   - Support fonts specified in ExtGState dictionaries.
   - Annotations with empty Border arrays should not draw a border.
   - Fix the CMap parser to handle large CID ranges.
   - Check for Type 3 CharProcs that call q or Q before the d0/d1 operator,
     and treat them as uncacheable.
   - Invert the selection color when starting in reverse video mode.
   - Device{Gray,RGB,CMYK} cannot be mapped via a resource dict.
   - Changed the PS output for masked images (explicit and color key
     masking): use a plain old clip path instead of rectclip to avoid
     array overflows.
   - Check the StemSnapH/V arrays when converting Type 1C fonts to Type 1 -
     if there are any duplicate or out-of-order values, skip that
     StemSnapH/V array.
   - Added the psMinLineWidth xpdfrc setting.
   - Fix an obscure issue in converting TrueType fonts to Type 42, related
     to empty glyph descriptions (12 zero bytes).
   - Pdftops now reports an error if there were any I/O errors writing to
     the PS output file.
   - Fix vertical text (CJK fonts) in PS output -- offset the character
     origin correctly.
   - Increased the number of digits used by pdfimages for the image number
     from three to four.
   - Handle right-to-left (e.g., Arabic) ligatures correctly in the text
     extractor.
   - Added the -loc and -locPS options to pdffonts.
   - Extend the object parser recursion limit to cover Stream::addFilters()
     / Stream::makeFilters() - to avoid another possibility of stack
     overflow.
   - Disable FreeType autohinting, because it can fail badly with font
     subsets that use invalid glyph names -- except in the case of Type 1
     fonts, which look much better with light autohinting.
   - Modified the rasterizer pipeline functions to process a scan line at a
     time (for performance).
   - Removed VMS build support (it hasn't been updated in ages).
   - Removed pdftotext's '-htmlmeta' option (use pdftohtml instead).
   - PSOutputDev's font/form setup code, and pdffonts, were not scanning
     soft mask groups in ExtGState dictionaries.
   - Invalid DCT input (e.g., from a damaged PDF file) could overflow the
     dctClip array.
   - When upsampling an image mask or image with a large resulting image
     size, do it in stream mode instead of prescaling the whole image
     (to avoid running out of memory).
   - Added infinite loop detection to pdffonts.


   To generate a diff of this commit:
   cvs rdiff -u -r1.80 -r1.81 pkgsrc/print/xpdf/Makefile
   cvs rdiff -u -r1.41 -r1.42 pkgsrc/print/xpdf/distinfo
   cvs rdiff -u -r1.4 -r1.5 pkgsrc/print/xpdf/patches/patch-al
   cvs rdiff -u -r1.3 -r1.4 pkgsrc/print/xpdf/patches/patch-am
   cvs rdiff -u -r1.4 -r0 pkgsrc/print/xpdf/patches/patch-aq \
       pkgsrc/print/xpdf/patches/patch-ar
pullup 4469
Pullup ticket #4470 - requested by tron
net/wireshark: security update

Revisions pulled up:
- net/wireshark/Makefile                                        1.124
- net/wireshark/distinfo                                        1.76

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Sun Aug  3 19:18:06 UTC 2014

   Modified Files:
   	pkgsrc/net/wireshark: Makefile distinfo

   Log Message:
   Update "wireshark" package to version 1.10.9. Changes since 1.10.8:
   - The following vulnerabilities have been fixed.
     * wnpa-sec-2014-08
       The Catapult DCT2000 and IrDA dissectors could underrun a
       buffer.
       Versions affected: 1.10.0 to 1.10.8
     * wnpa-sec-2014-09
       The GSM Management dissector could crash. (Bug 10216)
       Versions affected: 1.10.0 to 1.10.8
     * wnpa-sec-2014-10
       The RLC dissector could crash. (Bug 9795)
       Versions affected: 1.10.0 to 1.10.8
     * wnpa-sec-2014-11
       The ASN.1 BER dissector could crash. (Bug 10187)
       Versions affected: 1.10.0 to 1.10.8
   - The following bugs have been fixed:
     * GSM MAP: ensure that p2p_dir is always initialized before
       calling GSM SMS dissector (Bug 10234)
     * BFCP: include padding length in calculation of correct
       attribute length (Bug 10240)
     * GTP: allow empty Data Record Packet IE (Bug 10277)
     * WebSocket: increase max unmask payload size to 256K and
       indicate that packet is truncated is going above the new
       limit (Bug 10283)


   To generate a diff of this commit:
   cvs rdiff -u -r1.123 -r1.124 pkgsrc/net/wireshark/Makefile
   cvs rdiff -u -r1.75 -r1.76 pkgsrc/net/wireshark/distinfo
Pullup ticket #4471 - requested by obache
security/openssl: security update

Revisions pulled up:
- security/openssl/Makefile                                     1.195
- security/openssl/PLIST.common                                 1.19
- security/openssl/distinfo                                     1.108

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Thu Aug  7 01:29:45 UTC 2014

   Modified Files:
   	pkgsrc/security/openssl: Makefile PLIST.common distinfo

   Log Message:
   Update openssl to 1.0.1i.

    Changes between 1.0.1h and 1.0.1i [6 Aug 2014]

     *) Fix SRP buffer overrun vulnerability. Invalid parameters passed to the
        SRP code can be overrun an internal buffer. Add sanity check that
        g, A, B < N to SRP code.

        Thanks to Sean Devlin and Watson Ladd of Cryptography Services, NCC
        Group for discovering this issue.
        (CVE-2014-3512)
        [Steve Henson]

     *) A flaw in the OpenSSL SSL/TLS server code causes the server to
   negotiate      TLS 1.0 instead of higher protocol versions when the
   ClientHello message      is badly fragmented. This allows a
   man-in-the-middle attacker to force a      downgrade to TLS 1.0 even if
   both the server and the client support a      higher protocol version, by
   modifying the client's TLS records.

        Thanks to David Benjamin and Adam Langley (Google) for discovering and
        researching this issue.
        (CVE-2014-3511)
        [David Benjamin]

     *) OpenSSL DTLS clients enabling anonymous (EC)DH ciphersuites are =
   subject
        to a denial of service attack. A malicious server can crash the client
        with a null pointer dereference (read) by specifying an anonymous
   (EC)DH      ciphersuite and sending carefully crafted handshake messages.

        Thanks to Felix Grvbert (Google) for discovering and researching this
        issue.
        (CVE-2014-3510)
        [Emilia K=E4=B3=B0er]

     *) By sending carefully crafted DTLS packets an attacker could cause
   openssl      to leak memory. This can be exploited through a Denial of
   Service attack.      Thanks to Adam Langley for discovering and researching
   this issue.      (CVE-2014-3507)
        [Adam Langley]

     *) An attacker can force openssl to consume large amounts of memory =
   whilst
        processing DTLS handshake messages. This can be exploited through a
        Denial of Service attack.
        Thanks to Adam Langley for discovering and researching this issue.
        (CVE-2014-3506)
        [Adam Langley]

     *) An attacker can force an error condition which causes openssl to crash
        whilst processing DTLS packets due to memory being freed twice. This
        can be exploited through a Denial of Service attack.
        Thanks to Adam Langley and Wan-Teh Chang for discovering and
   researching      this issue.
        (CVE-2014-3505)
        [Adam Langley]

     *) If a multithreaded client connects to a malicious server using a
   resumed      session and the server sends an ec point format extension it
   could write      up to 255 bytes to freed memory.

        Thanks to Gabor Tyukasz (LogMeIn Inc) for discovering and researching
   this      issue.
        (CVE-2014-3509)
        [Gabor Tyukasz]

     *) A malicious server can crash an OpenSSL client with a null pointer
        dereference (read) by specifying an SRP ciphersuite even though it was
   not      properly negotiated with the client. This can be exploited through
   a      Denial of Service attack.

        Thanks to Joonas Kuorilehto and Riku Hietam=E4=AB=A9 (Codenomicon) for
        discovering and researching this issue.
        (CVE-2014-5139)
        [Steve Henson]

     *) A flaw in OBJ_obj2txt may cause pretty printing functions such as
        X509_name_oneline, X509_name_print_ex et al. to leak some information
        from the stack. Applications may be affected if they echo pretty
   printing      output to the attacker.

        Thanks to Ivan Fratric (Google) for discovering this issue.
        (CVE-2014-3508)
        [Emilia K=E4=B3=B0er, and Steve Henson]

     *) Fix ec_GFp_simple_points_make_affine (thus, EC_POINTs_mul etc.)
        for corner cases. (Certain input points at infinity could lead to
        bogus results, with non-infinity inputs mapped to infinity too.)
        [Bodo Moeller]


   To generate a diff of this commit:
   cvs rdiff -u -r1.194 -r1.195 pkgsrc/security/openssl/Makefile
   cvs rdiff -u -r1.18 -r1.19 pkgsrc/security/openssl/PLIST.common
   cvs rdiff -u -r1.107 -r1.108 pkgsrc/security/openssl/distinfo
pullups 4470 and 4471
Pullup ticket #4472 - requested by prlw1
lang/gcc44: build fix

Revisions pulled up:
- lang/gcc44/Makefile                                           1.43

---
   Module Name:    pkgsrc
   Committed By:   prlw1
   Date:           Tue Aug 12 08:33:31 UTC 2014

   Modified Files:
           pkgsrc/lang/gcc44: Makefile

   Log Message:
   Fix for PR pkg/48683 based on a hint from wiz@.
Pullup ticket #4472.
Pullup ticket #4473 - requested by wiz
www/serf: security update

Revisions pulled up:
- www/serf/Makefile                                             1.31
- www/serf/distinfo                                             1.17

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Sat Aug 16 12:11:53 UTC 2014

   Modified Files:
   	pkgsrc/www/serf: Makefile distinfo

   Log Message:
   Update to 1.3.7:

   Serf 1.3.7 [2014-08-11, from /tags/1.3.7, r2411]
     Handle NUL bytes in fields of an X.509 certificate. (r2393, r2399)
Pullup ticket #4473.
Pullup ticket #4475 - requested by prlw1
lang/php53: security update

Revisions pulled up:
- lang/php/phpversion.mk                                        1.69 via patch
- lang/php53/Makefile                                           1.49
- lang/php53/Makefile.php                                       1.41
- lang/php53/distinfo                                           1.75-1.76
- lang/php53/patches/patch-Zend_zend_language_parser.h          deleted
- lang/php53/patches/patch-ext_date_lib_parse__iso__intervals.c deleted
- lang/php53/patches/patch-ext_date_lib_parse__iso__intervals.re deleted

---
   Module Name:	pkgsrc
   Committed By:	prlw1
   Date:		Mon Jul 28 16:12:57 UTC 2014

   Modified Files:
   	pkgsrc/lang/php53: distinfo
   Added Files:
   	pkgsrc/lang/php53/patches: patch-Zend_zend_language_parser.h

   Log Message:
   Fix build of www/ap-php with PHP 5.3.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Aug 15 16:09:16 UTC 2014

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php53: Makefile Makefile.php distinfo
   Removed Files:
   	pkgsrc/lang/php53/patches: patch-Zend_zend_language_parser.h
   	    patch-ext_date_lib_parse__iso__intervals.c
   	    patch-ext_date_lib_parse__iso__intervals.re

   Log Message:
   Update php53 to 5.3.29, final PHP 5.3 release.

   14 Aug 2014, PHP 5.3.29

   - Core:
     . Fixed bug #66127 (Segmentation fault with ArrayObject unset). (Stas)
     . Fixed bug #67247 (spl_fixedarray_resize integer overflow). (Stas)
     . Fixed bug #67249 (printf out-of-bounds read). (Stas)
     . Fixed bug #67250 (iptcparse out-of-bounds read). (Stas)
     . Fixed bug #67252 (convert_uudecode out-of-bounds read). (Stas)
     . Fixed bug #67359 (Segfault in recursiveDirectoryIterator). (Laruence)
     . Fixed bug #67390 (insecure temporary file use in the configure script).
       (Remi) (CVE-2014-3981)
     . Fixed bug #67399 (putenv with empty variable may lead to crash). (Stas)
     . Fixed bug #67492 (unserialize() SPL ArrayObject / SPLObjectStorage Type
       Confusion) (CVE-2014-3515). (Stefan Esser)
     . Fixed bug #67498 (phpinfo() Type Confusion Information Leak Vulnerability).
       (Stefan Esser)

   - COM:
     . Fixed missing type checks in com_event_sink (Yussuf Khalil, Stas).

   - Date:
     . Fixed bug #66060 (Heap buffer over-read in DateInterval). (CVE-2013-6712)
       (Remi)
     . Fixed bug #67251 (date_parse_from_format out-of-bounds read). (Stas)
     . Fixed bug #67253 (timelib_meridian_with_check out-of-bounds read). (Stas)

   - Exif:
     . Fixed bug #65873 (Integer overflow in exif_read_data()). (Stas)

   - Fileinfo:
     . Fixed bug #66307 (Fileinfo crashes with powerpoint files). (Anatol)
     . Fixed bug #67326 (fileinfo: cdf_read_short_sector insufficient boundary
       check). (CVE-2014-0207)
     . Fixed bug #67327 (fileinfo: CDF infinite loop in nelements DoS).
       (CVE-2014-0238)
     . Fixed bug #67328 (fileinfo: fileinfo: numerous file_printf calls resulting
       in performance degradation). (CVE-2014-0237)
     . Fixed bug #67410 (fileinfo: mconvert incorrect handling of truncated pascal
       string size). (Francisco Alonso, Jan Kaluza, Remi)
     . Fixed bug #67411 (fileinfo: cdf_check_stream_offset insufficient boundary
       check). (Francisco Alonso, Jan Kaluza, Remi)
     . Fixed bug #67412 (fileinfo: cdf_count_chain insufficient boundary check).
       (Francisco Alonso, Jan Kaluza, Remi)
     . Fixed bug #67413 (fileinfo: cdf_read_property_info insufficient boundary
       check). (Francisco Alonso, Jan Kaluza, Remi)

   - Intl:
     . Fixed bug #67349 (Locale::parseLocale Double Free). (Stas)
     . Fixed bug #67397 (Buffer overflow in locale_get_display_name and
       uloc_getDisplayName (libicu 4.8.1)). (Stas)

   - Network:
     . Fixed bug #67432 (Fix potential segfault in dns_check_record()).
       (CVE-2014-4049). (Sara)

   - OpenSSL:
     . Fixed missing type checks in OpenSSL options (Yussuf Khalil, Stas).

   - Session:
     . Fixed missing type checks in php_session_create_id (Yussuf Khalil, Stas).
Pullup ticket #4475.
Remove superfluous patch file. Problem pointed out by Patrick Welche
on ticket #4475.
Pullup ticket #4476 - requested by taca
www/drupal7: security update

Revisions pulled up:
- www/drupal7/Makefile                                          1.28
- www/drupal7/PLIST                                             1.10
- www/drupal7/distinfo                                          1.21

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Aug  8 15:53:33 UTC 2014

   Modified Files:
   	pkgsrc/www/drupal7: Makefile PLIST distinfo

   Log Message:
   Update drupal7 to 7.31.

   Drupal 7.31, 2014-08-06
   ----------------------
   - Fixed security issues (denial of service). See SA-CORE-2014-004.

   Drupal 7.30, 2014-07-24
   -----------------------
   - Fixed a regression introduced in Drupal 7.29 that caused files or images
     attached to taxonomy terms to be deleted when the taxonomy term was edited
     and resaved (and other related bugs with contributed and custom modules).
   - Added a warning on the permissions page to recommend restricting access to
     the "View site reports" permission to trusted administrators. See
     DRUPAL-PSA-2014-002.
   - Numerous API documentation improvements.
   - Additional automated test coverage.
Pullup ticket #4477 - requested by taca
www/drupal6; security update

Revisions pulled up:
- www/drupal6/Makefile                                          1.49
- www/drupal6/distinfo                                          1.32

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Aug  8 15:54:21 UTC 2014

   Modified Files:
   	pkgsrc/www/drupal6: Makefile distinfo

   Log Message:
   Update drupal6 to 6.33.

   Drupal 6.33, 2014-08-06
   ----------------------
   - Fixed security issues (denial of service). See SA-CORE-2014-004.
Pullup tickets #4476 and #4477.
Pullup ticket #4478 - requested by wiz
x11/gnome-desktop3: build fix

Revisions pulled up:
- x11/gnome-desktop3/distinfo                                   1.6
- x11/gnome-desktop3/patches/patch-libgnome-desktop_libgsystem_gsystem-file-utils.c 1.1

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Thu Aug 21 10:37:48 UTC 2014

   Modified Files:
   	pkgsrc/x11/gnome-desktop3: distinfo
   Added Files:
   	pkgsrc/x11/gnome-desktop3/patches:
   	    patch-libgnome-desktop_libgsystem_gsystem-file-utils.c

   Log Message:
   Add fcntl.h for openat(). Might help build on NetBSD-6.